Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ralph Loader

#39419of 53,624
6.9Total CVSS
Vulnerabilities · 1
PT-2013-3603
6.9
2013-07-21
No Company Name Mentioned In The Text · Suds · CVE-2013-2217
**Name of the Vulnerable Software and Affected Versions** Suds version 0.4 **Description** The issue in Suds allows local users to potentially redirect SOAP queries and have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. This occurs when the tempdir is set to None in cache.py. **Recommendations** For Suds version 0.4, consider setting the tempdir to a directory that is not accessible by other users to prevent symlink attacks, or apply a fix that generates unpredictable cache file names.